CVE-2008-7002

Exploit

EPSS 0.05%
Published 19.08.2009 05:24:52
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the (1) exec, (2) system, (3) shell_exec, (4) passthru, or (5) popen functions, possibly involving pathnames such as "C:" drive notation.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Php ≫ Php Version5.2.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.153

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php

Exploit

http://www.securityfocus.com/bid/31064

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2008-7002

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-7002

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-7002

EUVD